CVE-2020-25197

Summary: CVE-2020-25197 affects GE Reason RT43X GNSS clocks (RT430, RT431, RT434). The underlying issue is a code injection vulnerability in webpages served by the device, allowing an authenticated remote attacker to execute arbitrary code on the system. Affected firmware versions are prior to 08...

CVE-2020-25197 GE Reason RT43X Clocks Code Injection

A code injection vulnerability exists in one of the webpages in GE Reason RT430, RT431 & RT434 GNSS clocks in firmware versions prior to version 08A06 that could allow an authenticated remote attacker to execute arbitrary code on the system...

PT-2022-8710 · Ge · Ge Reason Rt430 +2

Name of the Vulnerable Software and Affected Versions: GE Reason RT430, RT431 & RT434 GNSS clocks versions prior to 08A06 Description: The issue allows attackers to intercept and decrypt encrypted traffic through an HTTPS connection by having access to the hard-coded cryptographic key. This could...

PT-2022-5916

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16-rc6 Description An issue was discovered in the Linux kernel where the imx register uart clocks function in drivers/clk/imx/clk.c lacks a check of the return value of kcalloc, leading to a null pointer...

GSD-2021-1002350 clk: sunxi-ng: Unregister clocks/resets when unbinding

clk: sunxi-ng: Unregister clocks/resets when unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

UVI-2021-1002350 clk: sunxi-ng: Unregister clocks/resets when unbinding

clk: sunxi-ng: Unregister clocks/resets when unbinding This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.5 by commit...

CVE-2021-24671

The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24671

The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24671

The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

CVE-2021-24671 MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting

The MX Time Zone Clocks WordPress plugin before 3.4.1 does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks...

WordPress 插件 跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the WordPress plugin MX Time Zone Clocks, which stems from the fact that versions of the MX Time Zone Clocks WordPress plugin prior to version 3.4.1 do not escape the time zone...

PT-2021-8177 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the clk component of the Linux kernel, where unbinding a CCU driver unmaps the device's MMIO region but leaves its clocks/resets and their providers registered...

MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting

The plugin does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks PoC mxmtzctimezoneclocks timezone='"+alertXSS-timezone+"'...

MX Time Zone Clocks < 3.4.1 - Contributor+ Cross-Site Scripting

The plugin does not escape the timezone attribute of the mxmtzctimezoneclocks shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks mxmtzctimezoneclocks timezone='"+alertXSS-timezone+"'...

WordPress MX Time Zone Clocks plugin <= 3.4 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by apple502j in WordPress MX Time Zone Clocks plugin versions = 3.4. Solution Update the WordPress MX Time Zone Clocks plugin to the latest available version at least 3.4.1...

DEBIAN-CVE-2021-3571

A flaw was found in the ptp4l program of the linuxptp package. When ptp4l is operating on a little-endian architecture as a PTP transparent clock, a remote attacker could send a crafted one-step sync message to cause an information leak or crash. The highest threat from this vulnerability is to...

GSD-2021-1000261 ASoC: q6afe-clocks: fix reprobing of the driver

ASoC: q6afe-clocks: fix reprobing of the driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

UVI-2021-1000261 ASoC: q6afe-clocks: fix reprobing of the driver

ASoC: q6afe-clocks: fix reprobing of the driver This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

PT-2021-7994 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue exists due to insufficient input validation in the Q6afe-clocks driver. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of...

Various GE products are vulnerable to trust management issues

GE Grid Solutions Reason RT Clocks RT430 and others are a precision time synchronization unit from General Electric GE. GE Grid Solutions Reason RT Clocks RT430, RT431 & RT434 All firmware versions prior to Version 08A06 contain a security vulnerability that could allow an authenticated, remote...